Denying access to Windows Explorer

[PlainDave]

Hello,

Using XP Pro, I have successfully created a limited user
account for kids, certain relatives, etc. The limited user
account denies access to things like control panel
extensions, defrag, specified paths, etc. (Control Panel >
Admin Tools > Local Security Policy (settings) or Run >
gpedit.msc, etc.).

What I can't figure out is how to deny access to Windows
Explorer (what's the file name for Windows Explorer?).
They can still access it through the Start Menu, or just
simply pressing Windows Key + E. Any ideas how to deny
access while in the limited user account? Any help would
be much appreciated.

Sincerely,
PlainDave

 

[Kerem Gümrükcü]

Hi,

why u wanna restrict acces to the windows exporer. it is a intrinsic part of
the os and os can not
run without it. please tell more about your intentions and what to protect
in fact....

Best Regards

Kerem Gümrükcü

 

[Doug Knox MS-MVP]

The file name for Explorer is explorer.exe

 

[PlainDave]

Hi Kerem,

Read my original post in full. It explains what I'm trying
to accomplish.

Thanks,
PlainDave

 

[PlainDave]

Thanks, Doug, for replying. While I was waiting for
replies, I downloaded your prog "Windows XP Security
Console", but currently can't afford to license it (I'm
disabled.)

If I deny access to explorer.exe for the limited user
account using gpedit.msc, the user account won't boot
Windows - it just shows the wallpaper and hangs. Any ideas?

Thanks much,
PlainDave

-----Original Message-----
The file name for Explorer is explorer.exe
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
"PlainDave" <[email protected]> wrote

in message news:[email protected]...

 

[Doug Knox MS-MVP]

Explorer is the process that also provides the Windows shell, so restricting it stops the shell from loading.

 

[PlainDave]

So, how do I restrict access to Windows Explorer, yet
allow the user to access their account? What would be the
correct path or syntax or whatever to block access to
Windows Explorer?

Thanks much,
PlainDave

-----Original Message-----
Explorer is the process that also provides the Windows

shell, so restricting it stops the shell from loading.

 

[Jeff]

Hi,

Even after reading your original post, I can`t see why you
want to restrict access to windows Explorer. It is an
intergal part of the desktop shell, if you don`t allow it
to start, you won`t get any of your desktop items,
taskbar, start menu. Have you restricted access to my
computer as well? If not, they can pretty much do the
same thing as explorer. Access to windows explorer is not
going to compromise your computer security, especially if
you use permissions. Only other thing I can think of, is
trying to change the hot key commands that bring up
windows explorer.

Jeff

 

[PlainDave]

Man, do I feel dumb. I've been doing this (computers) for
10 1/2 years. I used to do everything through DOS - never
opened up Windows (3.1 at the time). Used a text-based web
browser (Unix), etc, etc.

I appreciate the reply. Here's what I'm wanting to do. The
account I use is the "administrator" account. I have set
up an account named "Kids". When those kids come to visit,
I want to press Windows Key + L, have them use the "Kids"
account, and I don't want them to be able to open certain
progs, such as Windows Explorer, System Properties, image
editing progs, etc. Sorry for being vague. I hope this
makes sense.

I now assume that I have a lot to read about permissions
in the Windows Help file and the MS Knowledge Base.

Thanks again,
PlainDave

 

[Jeff]

Hi,

Don`t be hard on yourself. I know how you feel. I
started with DOS 5.0 and Window 3.1, I didn`t upgrade to
windows 95 till almost Dec of 96, I put it off as long as
I could, didn`t want to endure a DOS and Windows combined
OS. When you set up the Kids account, you can either just
put them as user or create a new group and place them in
that group. Then as an Admin, go to the programs,
folders, and files you want to restrict them to and remove
the everyone and any other groups within those program
exe, files and folders, just leave the administrator in
them. That way they only have access to the files,
folders, program exe that has permissions for everyone,
user, admin, etc. Permissions can be tricky at times, I
know, since I recently been elected as System Admin at my
company. If you have further questions, just email me at
(e-mail address removed) I will try to answer anything you
have.

Jeff